Remove wikidata.org from CORS, keep only *.wikidata.org

Change-Id: Iab3155178a492baaaf1334df8ee196684ede3a16